This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/xS4Yp_ovY5BJPOyOqhKksJ1wnhc.roa File: xS4Yp_ovY5BJPOyOqhKksJ1wnhc.roa (raw, json) Hash identifier: QTJziojzNwwsyc85fUJ9i4BbVboJ8JdEekV7rnyN4Jo= Subject key identifier: C5:2E:18:A7:FA:2F:63:90:49:3C:EC:8E:AA:12:A4:B0:9D:70:9E:17 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019B797DE069CF1527EA5868054E54605548 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/xS4Yp_ovY5BJPOyOqhKksJ1wnhc.roa Signing time: Thu 01 Jan 2026 12:17:31 +0000 ROA not before: Thu 01 Jan 2026 12:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12536 IP address blocks: 212.121.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e0:69:cf:15:27:ea:58:68:05:4e:54:60:55:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Jan 1 12:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c52e18a7fa2f6390493cec8eaa12a4b09d709e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1e:38:f3:a3:19:50:75:80:7f:0a:f6:a0:4b: 2b:2b:59:eb:fd:be:53:9b:b3:86:36:33:92:b5:82: 17:85:15:2e:a7:02:db:dd:b3:19:23:ba:49:5c:79: e4:a6:2c:71:f3:8c:b0:56:c2:a4:06:d0:69:86:6b: b6:6d:26:e9:23:74:f5:81:b2:a1:21:5b:fb:bd:14: 01:8a:95:96:73:c3:8b:ec:af:09:a3:e9:4c:a5:93: 0d:ed:76:2f:78:f7:78:22:09:c4:a7:aa:75:62:14: e6:69:dc:4b:91:48:24:41:f3:89:8e:4c:31:08:4e: 8d:39:db:26:40:24:56:33:60:34:d4:f0:2a:56:0f: ab:ff:ae:78:7f:46:9c:0f:6b:c3:f4:db:6a:10:73: 0d:2d:10:1f:46:7a:f3:ed:43:ed:e1:50:a0:48:01: ca:00:06:18:95:74:a4:08:06:a2:fe:83:9a:5e:18: f8:fe:95:20:39:2d:7f:07:f8:e2:b6:bc:8f:48:82: b4:63:e5:82:de:d8:6d:8c:31:bd:65:3b:bb:ee:16: a9:ab:3d:47:0b:cb:ec:63:4b:23:56:57:43:a8:cc: 1c:4b:9c:41:38:aa:94:70:66:e0:dd:b1:43:04:df: 87:48:9a:4f:76:04:27:23:ac:6b:6b:a5:a8:cf:78: 74:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2E:18:A7:FA:2F:63:90:49:3C:EC:8E:AA:12:A4:B0:9D:70:9E:17 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/xS4Yp_ovY5BJPOyOqhKksJ1wnhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.121.32.0/19 Signature Algorithm: sha256WithRSAEncryption ab:c6:d6:be:d5:b2:4f:05:e0:97:31:e5:ef:94:fc:e6:f6:15: 9d:ab:17:6e:38:47:0a:3d:48:22:e9:df:91:f0:ea:cb:cf:c2: 02:d0:88:da:4f:8d:73:47:14:c7:60:8f:24:5b:fd:dc:94:fd: c2:7d:b2:05:62:de:c5:46:d2:c9:f3:0f:b0:0e:a0:b5:47:84: c0:63:e5:60:b0:26:72:7b:07:97:78:81:cb:41:84:89:ed:1c: e2:3a:e3:6f:83:e4:28:24:34:ee:c6:00:55:3f:12:1a:61:c1: 8d:cb:df:d8:cf:8c:43:a2:48:2c:0d:ca:9c:32:f9:27:c7:ad: c5:8e:75:ef:82:4b:fa:98:db:85:87:7e:8a:4b:29:2e:70:fe: f6:e2:b8:65:dc:6f:cc:c9:9f:9d:04:83:c0:b7:c6:ae:a1:20: 1d:2a:fe:45:f4:32:75:f9:a2:07:fd:75:9a:d7:29:36:4a:da: e8:83:43:41:5a:ab:c3:c1:3a:b2:a4:0a:72:21:56:58:34:53: b3:5d:3f:2e:8f:3a:c4:54:92:91:8c:ab:39:c5:30:2a:01:f0: e7:cf:5f:4f:85:f2:14:39:79:53:46:99:fd:aa:8e:f1:f7:6a: a4:de:d6:c4:e4:a2:7e:c8:bc:54:71:cd:94:3d:80:56:f1:be: 9d:c7:4f:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5feBpzxUn6lhoBU5UYFVIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjYwMTAxMTIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTJlMThhN2ZhMmY2MzkwNDkzY2VjOGVhYTEyYTRiMDlkNzA5ZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R4486MZUHWAfwr2oEsrK1nr/b5T m7OGNjOStYIXhRUupwLb3bMZI7pJXHnkpixx84ywVsKkBtBphmu2bSbpI3T1gbKh IVv7vRQBipWWc8OL7K8Jo+lMpZMN7XYvePd4IgnEp6p1YhTmadxLkUgkQfOJjkwx CE6NOdsmQCRWM2A01PAqVg+r/654f0acD2vD9NtqEHMNLRAfRnrz7UPt4VCgSAHK AAYYlXSkCAai/oOaXhj4/pUgOS1/B/jitryPSIK0Y+WC3thtjDG9ZTu77hapqz1H C8vsY0sjVldDqMwcS5xBOKqUcGbg3bFDBN+HSJpPdgQnI6xra6Woz3h06wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMUuGKf6L2OQSTzsjqoSpLCdcJ4XMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEveFM0WXBfb3ZZNUJKUE95T3FoS2tzSjF3bmhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1HkgMA0G CSqGSIb3DQEBCwUAA4IBAQCrxta+1bJPBeCXMeXvlPzm9hWdqxduOEcKPUgi6d+R 8OrLz8IC0IjaT41zRxTHYI8kW/3clP3CfbIFYt7FRtLJ8w+wDqC1R4TAY+VgsCZy eweXeIHLQYSJ7RziOuNvg+QoJDTuxgBVPxIaYcGNy9/Yz4xDokgsDcqcMvknx63F jnXvgkv6mNuFh36KSykucP724rhl3G/MyZ+dBIPAt8auoSAdKv5F9DJ1+aIH/XWa 1yk2Strog0NBWqvDwTqypApyIVZYNFOzXT8ujzrEVJKRjKs5xTAqAfDnz19PhfIU OXlTRpn9qo7x92qk3tbE5KJ+yLxUcc2UPYBW8b6dx09A -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:59 2026 by rpki-client